Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/0e488f-180d-4c8a-a452-4c74bb59c594/1/Wbtpg3BJzoZuGxpRyo2A8I8O4E4.roa
File: Wbtpg3BJzoZuGxpRyo2A8I8O4E4.roa (raw, json)
Hash identifier: uaICqrkhfpZmMkAJRwpQPvpv0b13/RuiGZs4BGcbowM=
Subject key identifier: 59:BB:69:83:70:49:CE:86:6E:1B:1A:51:CA:8D:80:F0:8F:0E:E0:4E
Certificate issuer: /CN=ef8455d40c2e3dbcb24446fcc97a09ed4badedc3
Certificate serial: 01927A5E218C8E82C77FECB0E1D0F264496E
Authority key identifier: EF:84:55:D4:0C:2E:3D:BC:B2:44:46:FC:C9:7A:09:ED:4B:AD:ED:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/74RV1AwuPbyyREb8yXoJ7Uut7cM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/0e488f-180d-4c8a-a452-4c74bb59c594/1/Wbtpg3BJzoZuGxpRyo2A8I8O4E4.roa
Signing time: Fri 11 Oct 2024 06:57:22 +0000
ROA not before: Fri 11 Oct 2024 06:57:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198050
IP address blocks: 64.190.43.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 12 Oct 2024 12:32:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:7a:5e:21:8c:8e:82:c7:7f:ec:b0:e1:d0:f2:64:49:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef8455d40c2e3dbcb24446fcc97a09ed4badedc3
Validity
Not Before: Oct 11 06:57:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=59bb69837049ce866e1b1a51ca8d80f08f0ee04e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:9d:e1:68:ea:16:fb:79:ba:c5:eb:ea:2a:02:
9f:ed:f5:5b:a5:95:c5:21:78:12:fd:56:87:60:3b:
b7:fe:9a:b9:8f:c7:f5:90:f7:a1:30:bd:ec:e6:e2:
d4:17:b4:a7:fa:8e:43:89:1f:1f:73:c5:30:ab:55:
0b:73:c1:1f:f5:5c:6f:da:22:b5:d5:85:11:83:3d:
f5:65:e0:3f:23:78:9a:eb:44:b1:60:37:6f:76:64:
8f:56:fe:46:99:9e:ef:7b:55:ee:ae:85:98:ae:25:
0b:8b:c2:46:e8:10:46:25:3f:72:15:ea:90:0a:da:
ea:14:d4:c4:1b:c9:c5:a3:cf:2f:07:df:38:af:97:
b0:d7:18:5b:e4:f4:da:00:e9:4f:74:66:15:b1:ed:
67:28:b2:ae:70:23:3c:8c:3f:da:f3:95:28:96:4a:
5d:91:6e:9b:fc:62:1c:5b:90:5d:25:11:44:44:18:
07:fe:b2:ac:54:5b:fd:f9:27:17:64:bf:34:98:19:
d2:97:c0:3b:d2:fa:39:c7:4f:39:fd:1f:6e:48:9f:
ae:fa:35:b6:24:56:12:12:93:b2:5e:80:a5:90:bd:
9c:b3:d6:7b:f7:a4:c5:c2:3a:a9:b8:12:ae:21:1f:
2c:0b:0f:9d:71:bf:dd:92:92:ab:ae:00:54:4a:5c:
69:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:BB:69:83:70:49:CE:86:6E:1B:1A:51:CA:8D:80:F0:8F:0E:E0:4E
X509v3 Authority Key Identifier:
keyid:EF:84:55:D4:0C:2E:3D:BC:B2:44:46:FC:C9:7A:09:ED:4B:AD:ED:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/74RV1AwuPbyyREb8yXoJ7Uut7cM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/0e488f-180d-4c8a-a452-4c74bb59c594/1/Wbtpg3BJzoZuGxpRyo2A8I8O4E4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/0e488f-180d-4c8a-a452-4c74bb59c594/1/74RV1AwuPbyyREb8yXoJ7Uut7cM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
64.190.43.0/24
Signature Algorithm: sha256WithRSAEncryption
38:df:87:0d:da:72:f2:0e:41:47:6c:15:01:20:8e:8a:02:3d:
88:36:ae:51:31:c8:68:54:6e:9d:da:08:88:71:69:5c:67:25:
ac:12:ef:d9:58:76:78:35:c5:70:7e:38:34:73:b4:79:33:3e:
ef:17:7f:27:4b:db:0f:85:f1:4b:ec:79:58:9d:29:83:08:0f:
e7:2d:8d:13:ba:14:53:f3:00:bc:f2:6a:84:08:48:41:df:cd:
f0:4f:2c:aa:35:2a:0d:ef:ea:3b:a3:1a:6b:e2:a2:1e:10:ae:
70:47:92:db:91:8b:6a:34:d2:73:be:38:8f:e9:8d:39:a6:2f:
27:a2:d7:71:d6:19:35:af:d6:d3:aa:fa:66:3f:8f:73:de:77:
dc:b1:2c:e2:72:14:d2:ae:38:53:a6:f8:41:7f:97:52:a5:8b:
4f:48:41:7f:80:8d:ce:6a:e9:75:d7:0e:f7:15:ab:2d:66:ab:
14:a5:02:49:aa:a0:d3:be:73:2a:5a:9a:5b:1e:b6:05:95:7d:
d7:54:ed:a3:a0:17:52:df:8e:e6:7c:9a:30:29:4c:36:9f:33:
93:e0:e3:c5:b0:39:cd:d3:03:96:ae:2b:1f:a8:23:17:be:31:
6d:67:ad:8a:c3:db:39:1b:d8:23:bf:25:25:dc:25:8f:db:33:
d9:d7:7d:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 12 18:31:05 2024 by rpki-client on console-ams.rpki-client.org